Inferensys

Prompt

Misinformation and Disinformation Risk Scoring Prompt

A practical prompt playbook for using Misinformation and Disinformation Risk Scoring Prompt in production AI workflows.
Risk analyst performing AI risk assessment on laptop, risk matrices visible, casual office risk session.
PROMPT PLAYBOOK

When to Use This Prompt

A practical guide for integrity engineers who need to score content for misinformation risk before it reaches users or downstream models.

This prompt is for integrity and safety engineers who need a structured, auditable risk signal to control content distribution, recommendation system inputs, or model training data. The job-to-be-done is triage: you have a high volume of content that may contain false or misleading claims, and you need to decide what gets blocked, labeled, demoted, or escalated for human review before it causes harm. The ideal user is an engineer or operator embedding this prompt into a production pipeline where every decision must be traceable to a claim, a checkability assessment, and a harm evaluation. You should use this prompt when your platform needs a consistent, repeatable scoring layer that sits between content ingestion and distribution—not as a replacement for fact-checking organizations, but as a routing and prioritization tool that reduces the surface area of un-reviewed misinformation.

The prompt requires several concrete inputs to function reliably. You must provide the content to be scored as [INPUT], a [CONTEXT] block that defines your platform's risk tolerance and content policies, and an [OUTPUT_SCHEMA] that specifies the exact JSON structure you expect (including claim extraction fields, checkability scores, harm assessments, risk tiers, and recommended actions). You should also supply a [FACT_CHECK_CORPUS] or retrieval mechanism that grounds the model's checkability assessment in known fact-check records—without this grounding, the prompt will produce plausible-sounding but unverifiable confidence scores. The prompt works best when paired with a validation layer that checks output structure, enforces enum values for risk tiers, and flags outputs where the model claims high confidence without citing specific fact-check sources. For high-stakes domains like public health, election integrity, or crisis response, you must route all outputs through a human review queue regardless of the model's confidence score.

Do not use this prompt when you need a definitive truth judgment, when the content requires real-time fact-checking against breaking news, or when the cost of a false negative is catastrophic without human review. This prompt is a triage and routing tool, not a publisher. It will fail on satire, opinion pieces, and highly contextual claims where checkability is inherently low. Before deploying, calibrate the risk tiers against a labeled dataset that reflects your platform's actual content distribution, and run regular evals to detect drift in the model's sensitivity to new misinformation narratives. The next step after reading this section is to copy the prompt template, adapt the placeholders to your taxonomy, and build the validation harness that will catch malformed outputs before they reach your distribution controls.

PRACTICAL GUARDRAILS

Use Case Fit

Where the Misinformation and Disinformation Risk Scoring Prompt works and where it introduces operational risk.

01

Good Fit: Pre-Publication Content Review

Use when: content teams need a structured risk assessment before publishing user-generated or AI-generated text. The prompt extracts claims, scores checkability, and assigns a risk tier. Guardrail: Always ground the output against a known fact-check corpus and require human sign-off for high risk tiers before distribution.

02

Bad Fit: Real-Time Chat Filtering

Avoid when: latency must be under 500ms. Claim extraction and evidence ranking require multiple reasoning steps that add unacceptable delay for synchronous chat. Guardrail: Use a lightweight classifier for real-time blocking and reserve this prompt for asynchronous post-hoc analysis or batch review queues.

03

Required Inputs

What you need: the full text to analyze, a defined risk taxonomy, a reference to the fact-check corpus, and a calibrated confidence threshold. Guardrail: Missing any input degrades scoring reliability. Validate inputs at the application layer before invoking the model, and abort if the text is empty or the taxonomy is undefined.

04

Operational Risk: Over-Flagging Satire and Opinion

What to watch: the model may misclassify satire, parody, or strongly-worded opinion as high-risk disinformation. Guardrail: Add a genre classification step before risk scoring. Route content tagged as opinion or satire to a separate review path with higher thresholds for escalation.

05

Operational Risk: Corpus Drift and Stale Grounding

What to watch: fact-check corpora age quickly. The prompt may assign low risk to novel misinformation that hasn't been fact-checked yet. Guardrail: Log the last_updated timestamp of the grounding corpus with every score. Escalate any claim where the corpus is older than your freshness SLA, and flag uncheckable claims for human triage.

06

Operational Risk: Downstream Action Without Review

What to watch: teams wiring the risk score directly to automated takedown or distribution-reduction pipelines without human review. Guardrail: Never automate destructive actions on high or critical risk tiers. Require a human-in-the-loop approval step, log the reviewer identity and rationale, and maintain an audit trail for every action taken.

PROMPT PLAYBOOK

Copy-Ready Prompt Template

A production-ready prompt for scoring content for misinformation risk, producing a structured risk tier and recommended action.

This prompt is designed to be dropped into your AI safety pipeline. It instructs the model to act as an integrity analyst, extracting factual claims from the input, assessing their checkability, and evaluating potential harm. The output is a structured JSON object suitable for automated routing, logging, and human review queues. Before integrating, ensure your system can handle the required input variables and that you have a plan for evaluating the output against a ground-truth dataset.

text
You are an integrity and safety analyst. Your task is to score the provided content for misinformation and disinformation risk. You must extract verifiable claims, assess their checkability, and evaluate the potential for real-world harm.

Follow these steps:
1.  **Claim Extraction:** Identify and list all discrete, factual claims made in the content. Ignore opinions, questions, and rhetorical statements.
2.  **Checkability Assessment:** For each claim, determine if it is verifiable using authoritative, publicly available sources. Classify each as 'Checkable' or 'Uncheckable'.
3.  **Harm Potential Evaluation:** Analyze the potential for the content, if false or misleading, to cause harm in categories such as public health, public safety, democratic processes, or individual reputation. Rate the overall harm potential as 'Low', 'Medium', 'High', or 'Critical'.
4.  **Risk Scoring:** Synthesize the checkability and harm assessments to assign an overall risk tier: 'Tier 1 (Low Risk)', 'Tier 2 (Medium Risk)', 'Tier 3 (High Risk)', or 'Tier 4 (Critical Risk)'.
5.  **Recommend Action:** Based on the risk tier, recommend a single action: 'No Action', 'Label Content', 'Reduce Distribution', or 'Escalate for Urgent Review'.

## INPUT
[CONTENT_TO_SCORE]

## CONSTRAINTS
- Base your assessment strictly on the provided content. Do not introduce external knowledge.
- If no factual claims are present, the risk tier must be 'Tier 1 (Low Risk)' and the action 'No Action'.
- For any risk tier of 'Tier 3' or above, the recommended action must be 'Reduce Distribution' or 'Escalate for Urgent Review'.
- Your output must be a single, valid JSON object matching the output schema. Do not include any other text.

## OUTPUT_SCHEMA
{
  "claims": [
    {
      "claim_text": "string",
      "checkability": "Checkable | Uncheckable"
    }
  ],
  "overall_harm_potential": "Low | Medium | High | Critical",
  "risk_tier": "Tier 1 (Low Risk) | Tier 2 (Medium Risk) | Tier 3 (High Risk) | Tier 4 (Critical Risk)",
  "recommended_action": "No Action | Label Content | Reduce Distribution | Escalate for Urgent Review",
  "rationale": "A concise summary explaining the risk tier and action."
}

To adapt this template, replace the [CONTENT_TO_SCORE] placeholder with the text you need to evaluate. You can further refine the behavior by adding few-shot examples to the [EXAMPLES] section or by adjusting the harm categories in the prompt body to match your platform's specific policies. For high-stakes applications, always route outputs with a risk_tier of 'Tier 3' or above to a human review queue and log the full JSON payload for auditing.

IMPLEMENTATION TABLE

Prompt Variables

Required inputs for the Misinformation and Disinformation Risk Scoring Prompt. Each placeholder must be populated before model invocation to ensure reliable claim extraction, checkability assessment, and risk tier assignment.

PlaceholderPurposeExampleValidation Notes

[CONTENT_TO_SCORE]

The full text, transcript, or social media post to evaluate for misinformation risk

A 500-word article claiming a new study proves vaccines cause a specific rare condition

Required. Must be non-empty string. Truncate to model context window minus 2000 tokens for instruction overhead. Reject if only contains URLs without body text

[CONTENT_TYPE]

The format category of the input to adjust scoring heuristics

social_media_post

Required enum: article, social_media_post, transcript, comment, headline, image_caption, video_description. Used to weight virality potential and checkability

[CONTENT_SOURCE]

Origin of the content for provenance weighting

verified_news_outlet

Required enum: verified_news_outlet, unverified_blog, social_media_user, official_government, academic_institution, anonymous, unknown. Affects initial credibility baseline

[FACT_CHECK_CORPUS]

Reference corpus of known fact-checks for grounding claim verification

["claim_id:FC-2024-0182", "claim_id:FC-2024-1034"]

Optional array of fact-check IDs or snippets. If null, model relies on training-data knowledge only. Strongly recommended for production use. Validate each entry has a source date and publisher

[HARM_TAXONOMY]

The harm categories to evaluate against

["public_health_misinfo", "election_integrity", "financial_scam"]

Required array of 1-5 harm categories from approved taxonomy. Each category must match a defined policy rule. Reject unknown categories before prompt assembly

[RISK_THRESHOLDS]

Score boundaries that determine risk tier assignment

{"low": 0.3, "medium": 0.6, "high": 0.8, "critical": 0.95}

Required object with numeric thresholds between 0.0 and 1.0. Must be monotonically increasing. Validate low < medium < high < critical. Default to organizational policy if not specified

[OUTPUT_LOCALE]

Language and region for action recommendations and explanations

en-US

Required BCP-47 locale code. Determines language of output fields like recommended_action and rationale. Must match a supported locale in your downstream review pipeline

[PREVIOUS_RISK_SCORE]

Prior risk score for this content source or author to enable trend detection

0.72

Optional float 0.0-1.0 or null. If provided, model compares current score to prior for escalation/de-escalation signal. Validate score is from same scoring rubric version

PROMPT PLAYBOOK

Implementation Harness Notes

How to wire the Misinformation and Disinformation Risk Scoring Prompt into a production application with validation, retries, logging, and human review gates.

This prompt is designed to sit behind an API endpoint or queue worker that receives content payloads—articles, social posts, transcripts—and returns a structured risk assessment. The harness must treat the model's output as a preliminary signal, not a final decision. Because misinformation scoring carries direct reputational and policy consequences, the implementation must include strict output validation, confidence thresholding, and a mandatory human-review path for high-severity or low-confidence results. The prompt expects a [CONTENT] input, an optional [CONTEXT] block with known fact-check corpora or editorial guidelines, and a defined [OUTPUT_SCHEMA] that includes risk tier, extracted claims, checkability scores, and recommended actions. Wire this prompt into a pipeline where the input is sanitized and truncated to a maximum token length before invocation to prevent context-window overruns that silently drop claims from analysis.

Start with a validation layer that parses the model's JSON response and checks for schema compliance before any downstream action. Required fields include risk_tier (must be one of LOW, MEDIUM, HIGH, CRITICAL), claims (array of objects with claim_text, checkability_score, and harm_potential), and recommended_action (one of NO_ACTION, LABEL, REDUCE_DISTRIBUTION, ESCALATE). If the model returns malformed JSON, missing required fields, or enum values outside the allowed set, the harness should retry once with a repair prompt that includes the validation error message. After two consecutive failures, log the incident and route to a human review queue. For model choice, use a model with strong reasoning and structured output capabilities—GPT-4o or Claude 3.5 Sonnet work well—and set temperature=0 to maximize consistency across repeated scoring runs. Implement confidence gating: if the model's self-reported confidence score (included in the output schema) falls below 0.7, or if the risk tier is HIGH or CRITICAL, automatically escalate to human review regardless of schema validity. Log every invocation with the input hash, model version, output, validation result, and routing decision for auditability.

For grounding evaluation, maintain a holdout set of fact-checked claims from sources like the International Fact-Checking Network (IFCN) or your organization's internal editorial corpus. Run this prompt against that holdout set weekly and compare the model's risk tier assignments and claim checkability scores against ground truth. Track precision and recall for HIGH/CRITICAL classifications specifically—false negatives here mean harmful misinformation passing through unlabeled. If precision drops below 85% or recall below 90%, freeze the prompt version and investigate before updating production. Avoid wiring this prompt directly to automated content takedown or account suspension actions; the output should always feed a review queue or labeling system first. The highest-risk failure mode is over-escalation on legitimate but controversial content, which erodes trust and creates editorial bottlenecking. Monitor the ratio of ESCALATE to LABEL actions weekly and investigate if the escalation rate exceeds 10% of total classifications without a corresponding external event driving the increase.

IMPLEMENTATION TABLE

Expected Output Contract

Defines the exact JSON schema, field types, and validation rules for the Misinformation and Disinformation Risk Scoring Prompt output. Use this contract to build a post-processing validator before the score enters any routing or moderation pipeline.

Field or ElementType or FormatRequiredValidation Rule

risk_tier

enum: [low, medium, high, critical]

Must match exactly one of the four defined tiers. Reject any output with a tier not in this set.

risk_score

integer (0-100)

Must be an integer between 0 and 100 inclusive. Score must be consistent with risk_tier (e.g., high tier requires score >= 70).

claims

array of objects

Must be a non-empty array. Each object must contain claim_text, checkability, and harm_potential fields.

claims[].claim_text

string

Must be a non-empty string. Should be a direct extract or close paraphrase from [INPUT].

claims[].checkability

enum: [verifiable, unverifiable, opinion, partially_verifiable]

Must match one of the four defined checkability values. Reject any other value.

claims[].harm_potential

enum: [none, low, medium, high, severe]

Must match one of the five defined harm levels. Reject any other value.

recommended_action

enum: [allow, label, reduce_distribution, escalate, block]

Must match one of the five defined actions. Action must be consistent with risk_tier (e.g., critical tier requires escalate or block).

rationale_summary

string

Must be a non-empty string between 50 and 500 characters. Must reference at least one specific claim from the claims array.

PRACTICAL GUARDRAILS

Common Failure Modes

What breaks first when scoring misinformation risk and how to guard against it in production.

01

Over-Flagging Satire and Opinion

What to watch: The model confuses clearly labeled satire, parody, or opinion pieces with factual misinformation, producing high-risk scores for protected speech. This erodes trust and creates unnecessary review queues. Guardrail: Add explicit definitions for satire, opinion, and humor in the system prompt. Include few-shot examples that demonstrate low-risk scoring for content with clear genre markers. Implement a pre-check for publisher category and authorial stance before scoring.

02

Claim Extraction Drift on Ambiguous Text

What to watch: The model extracts checkable claims from text that is intentionally vague, rhetorical, or speculative, then scores those pseudo-claims as high-risk. This inflates false positives and wastes fact-checker time. Guardrail: Require the prompt to first assess claim checkability before scoring. Add a 'NOT_CHECKABLE' category for statements that lack a falsifiable factual core. Validate that extracted claims are specific, verifiable, and attributable before risk scoring proceeds.

03

Recency Blindness and Stale Grounding

What to watch: The model scores content against outdated fact-check corpora or training data, flagging claims that have since been verified or debunked by newer evidence. This is especially dangerous for fast-moving news cycles. Guardrail: Pair the prompt with a retrieval step that pulls the most recent fact-checks from a live corpus before scoring. Include a 'last_checked_date' field in the output schema. If grounding evidence is older than a configurable threshold, downgrade confidence and escalate for human review.

04

Harm Potential Inflation Without Context

What to watch: The model assigns high harm potential scores to claims that are technically false but low-impact, or to true claims that could be misused. This breaks triage by treating all flagged content as equally urgent. Guardrail: Separate harm potential into distinct axes: immediacy, scale, and severity. Require the prompt to justify each axis with evidence. Cap the overall risk tier when harm potential is high but checkability is low, preventing escalation of unverifiable but alarming content.

05

Source Authority Overweighting

What to watch: The model defers to the reputation of a source rather than the verifiability of the specific claim, scoring false claims from authoritative domains as low-risk and true claims from low-authority domains as high-risk. Guardrail: Instruct the prompt to score the claim independently of source reputation. Add a separate 'source_reliability' field that captures domain trustworthiness without contaminating the claim risk score. Use both fields in the final routing decision, not the claim score alone.

06

Multi-Claim Confusion and Score Averaging

What to watch: The model encounters text containing multiple claims of varying veracity and produces a single averaged risk score that obscures the one dangerous claim inside otherwise benign content. Guardrail: Require per-claim extraction and scoring before any aggregation. The output schema must include an array of individual claims with independent risk scores. Route based on the maximum claim risk, not the average. Flag content where any single claim exceeds the escalation threshold.

IMPLEMENTATION TABLE

Evaluation Rubric

Use this rubric to test the Misinformation and Disinformation Risk Scoring Prompt before production deployment. Each criterion targets a specific failure mode common in claim extraction, checkability assessment, and harm scoring.

CriterionPass StandardFailure SignalTest Method

Claim Extraction Completeness

All factual claims in [INPUT] are extracted as discrete items in the claims array; opinions and questions are excluded

Missing a verifiable factual claim present in the source text; extracting subjective statements as factual claims

Run against a golden set of 20 annotated news excerpts; require recall >= 0.95 on factual claim extraction

Checkability Classification Accuracy

Each claim is correctly labeled as checkable, uncheckable-opinion, uncheckable-future, or uncheckable-insufficient-evidence per the taxonomy

Labeling a claim with known fact-check records as uncheckable; labeling a pure opinion as checkable

Test against 50 claims with known fact-check verdicts from ClaimReview schema; require >= 0.90 F1 per class

Harm Potential Scoring Calibration

Harm scores align with the defined severity scale; high-harm claims (public health, election integrity, safety) score >= 4 on a 1-5 scale

Scoring a demonstrably false vaccine claim as low harm; inflating harm for politically charged but factually minor claims

Use 30 claims with expert harm annotations from public health and election integrity domains; require Spearman correlation >= 0.85

Risk Tier Assignment Logic

Risk tier (low, medium, high, critical) follows the documented matrix combining checkability, harm, and confidence; critical tier requires both high harm and high checkability

Assigning critical tier to uncheckable claims; assigning low tier to checkable high-harm claims

Validate against 100 scored outputs; check that tier assignment is deterministic given the same claim, harm, and confidence inputs; zero logic violations allowed

Confidence Score Grounding

Confidence scores reflect actual model uncertainty; low confidence when evidence is ambiguous or sources conflict; high confidence only with clear corroboration

Confidence >= 0.9 on claims where the provided context contains contradictory evidence; confidence <= 0.3 on claims with clear, unanimous source support

Test with 20 claims paired with conflicting vs. corroborating evidence sets; require confidence monotonicity with evidence clarity

Source Citation Integrity

Every checkable claim includes at least one cited source; citations reference actual provided context passages, not hallucinated URLs or DOIs

Citing a source not present in [CONTEXT]; fabricating fact-check organization names or report titles

Run with context containing known source IDs; verify all citations resolve to provided context; zero hallucinated citations allowed

Recommended Action Appropriateness

Action matches the risk tier and platform policy: label for low, reduce-distribution for medium, escalate for high, emergency-escalate for critical

Recommending escalate for low-risk claims; recommending label for critical public safety misinformation

Test against 40 scored outputs with predefined expected actions; require exact match on action for critical tier; allow one-level deviation for lower tiers

Structured Output Schema Compliance

Output is valid JSON matching the [OUTPUT_SCHEMA]; all required fields present; no extra fields; enum values match allowed sets

Missing required field risk_tier; using undefined enum value for checkability; adding hallucinated fields

Validate output against JSON Schema using a programmatic validator; require 100% schema compliance across 200 test runs

ADAPTATION OPTIONS

Adapt This Prompt

How to adapt

Start with the base risk-scoring prompt and a small hand-labeled dataset of 20–30 content samples. Use a single frontier model call without tool augmentation. Focus on claim extraction and checkability assessment before adding harm potential scoring.

Simplify the output schema to three fields: [CLAIMS], [CHECKABILITY_TIER], and [RISK_TIER]. Skip multi-turn refinement and source retrieval in early iterations.

Watch for

  • Over-scoring opinion as misinformation when the prompt lacks a clear distinction between factual claims and subjective statements
  • Claim extraction missing implied claims or treating metaphors as literal assertions
  • No baseline eval set, making it impossible to know if prompt changes improve or degrade scoring
Prasad Kumkar

About the author

Prasad Kumkar

CEO & MD, Inference Systems

Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.

His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.